TrustedCert Property

Specifies a Certificate that can be used to validate the trust of other certificates.

Data Type

Remarks

This setting is only relevant if TrustAllCertificates is set to False.

During signature verification, the adapter will attempt to validate the trust of the SignerCert. To succeed, the Certificate must be trusted directly or the root of the Certificate chain must be a trusted Certificate. Any intermediate Certificates between the trusted Certificate and the signer's Certificate must be included as a KnownCert.

In general, only root certificates received via a trusted channel should be set as a TrustedCert. Certificates that are not root or are less secure should be specified as a KnownCert to avoid affecting system security.

To include multiple unique Certificates as trusted Certificates, the following configuration options should be used:

• AltCertType[index]
• AltCertSource[index]
• AltCertStore[index]
• AltCertPassword[index]